@kvbox/server 0.5.12 → 0.5.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kvbox/server",
3
- "version": "0.5.12",
3
+ "version": "0.5.13",
4
4
  "description": "kvbox host daemon: owns Firecracker microVMs on a Linux host and serves the kvbox API. Managed with the @kvbox/cli CLI.",
5
5
  "type": "module",
6
6
  "license": "MIT",
@@ -256,6 +256,9 @@ do_proxy_rm() {
256
256
  # shellcheck disable=SC2086
257
257
  if has_rule $spec; then del_rule $spec; removed=1; fi
258
258
  done < <(proxy_specs "$@")
259
+ # The rules only catch new flows: drop the tracked ones too, or a steady UDP stream keeps its
260
+ # conntrack entry alive and keeps reaching the box. conntrack exits 1 when there was none.
261
+ if command -v conntrack >/dev/null 2>&1; then conntrack -D -p "$5" --orig-port-dst "$3" >/dev/null 2>&1 || true; fi
259
262
  if [[ $removed -eq 1 ]]; then ok "$5 port $3 on this host no longer reaches box $1"; else skip "$5 port $3 on this host was not forwarding to box $1"; fi
260
263
  }
261
264
  # Every forward rule in place, as "<table>\t<rule without -A>", found by its kvbox:<box-id> tag